News & Analysis as of

Data Processors Data Privacy

Gray Reed

Data Protection Assessments: A New Arsenal for Combating Cyberattacks

Gray Reed on

In a landscape where the average cost of a data breach reached an all-time high of $4.88 million in 2024 — a 10% increase over the previous year — data protection assessments (DPAs) serve as a preemptive tool to identify...more

Fisher Phillips

Pennsylvania House Passes Consumer Privacy Bill: What Your Business Needs to Know + 6 Steps You Can Take Now

Fisher Phillips on

Pennsylvania could soon join the growing list of states to enact comprehensive data privacy laws, and businesses that operate in PA must take note. Earlier this month, the commonwealth’s House passed a bipartisan consumer...more

White & Case LLP

EU Data Act: Unlocking Data in Healthcare, Life Sciences, and Beyond

White & Case LLP on

The EU Data Act ushers in a sweeping new framework for access to and use of data from connected products and related services. Organizations, such as healthcare and life sciences companies, should prepare now, as many of the...more

DLA Piper

ICO v Clearview – a Test of the ICO’s Reach?

DLA Piper on

The Upper Tribunal (UT) has handed down its judgment in the UK Information Commissioner’s (Information Commissioner) appeal against the First-tier Tribunal (FTT) decision on Clearview AI Inc (Clearview). The UT upheld three...more

DLA Piper

Innovation Law Insights

DLA Piper on

On 6 August 2025, EIOPA published an opinion aimed at clarifying how the interpretation of insurance regulations should be aligned with the provisions of the AI Act. The document doesn't introduce new rules but provides...more

Bass, Berry & Sims PLC

Slalom Through Sensitive Data: Utah Skis into Consumer Privacy Protection

Bass, Berry & Sims PLC on

On March 24, 2022, Utah became the fourth state to enact comprehensive consumer privacy legislation when Governor Spencer Cox signed S.B. 227 into law. The Utah Consumer Privacy Act (UCPA or the Act) took effect on December...more

Goodwin

Navigating the EU Data Act: Key Obligations and a Spotlight on Switching Rights

Goodwin on

Regulation (EU) 2023/2854 (the Data Act) entered into force across the EU on 12 September 2025. It forms a key part of the EU’s broader data strategy and establishes a comprehensive framework for how data is accessed, used,...more

Hogan Lovells

Asia-Pacific Privacy Legislation Tracker

Hogan Lovells on

As data protection laws across the Asia-Pacific region continue to evolve, businesses operating in the region face increasing complexity in managing compliance and risk. To support our clients in navigating this dynamic...more

DarrowEverett LLP

How New Rhode Island Privacy Law May Impact Businesses Across U.S.

DarrowEverett LLP on

Rhode Island businesses and any company with Rhode Island customers are officially on the clock. The Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA” or “the Act”) takes effect January 1, 2026, meaning...more

Wilson Sonsini Goodrich & Rosati

EU Data Act Enters into Force

Effective September 12, 2025, the EU Data Act introduced new rules on access to and sharing of data from certain products and services in business-to-consumer (B2C), business-to-business (B2B), and business-to-government...more

Latham & Watkins LLP

EU Data Act - What Businesses Need to Know

Latham & Watkins LLP on

The Act presents a significant overhaul of European data law, affecting most companies that handle digital products and connected services, and data processing services, in the EU....more

Fisher Phillips

Eyes on Michigan: What Businesses Need to Know About Pending Consumer Privacy and Identity Theft Legislation

Fisher Phillips on

Michigan lawmakers are considering sweeping updates to the state’s identity theft protection law while also debating whether Michigan will become one of nearly half the states that have passed a consumer privacy law. Fisher...more

Baker Botts L.L.P.

CJEU Clarifies Requirements and Definition of Pseudonymisation

Baker Botts L.L.P. on

On September 4, 2025, the Court of Justice of the European Union (“CJEU”), delivered its judgment in European Data Protection Supervisor ("EDPS") v. Single Resolution Board ("SRB") (C-413/23 P). The decision clarifies two...more

Moore & Van Allen PLLC

Getting Ready for Maryland’s Online Data Privacy Act—A New Trendsetter?

We’re about one month away from the effective date of Maryland’s version of a state comprehensive privacy law--the Maryland Online Privacy Act (MODPA). Effective October 1, 2025, MODPA contains the now familiar comprehensive...more

Osano

What Is the Processing of Personal Data?

Osano on

You never think about breathing air. Most of the time, you’re not consciously moving your legs as you walk. You don’t have to remind yourself to blink every few seconds.  For modern businesses, that’s what processing personal...more

Latham & Watkins LLP

EU Data Act Significant New Switching Requirements Due to Take Effect for Data Processing Services

Latham & Watkins LLP on

In the rapidly evolving landscape of European tech regulation, the Data Act introduces changes with the potential to reshape established market dynamics, presenting significant challenges and opportunities for affected...more

Hogan Lovells

Thailand ramps up data protection enforcement

Hogan Lovells on

Thailand's Personal Data Protection Committee (“PDPC”) has significantly intensified its enforcement of Thailand's Personal Data Protection Act B.E. 2562 (2019) (“PDPA”), announcing on 1 August 2025 eight new administrative...more

Bradley Arant Boult Cummings LLP

Tennessee Data Privacy Law (TIPA) Effective July 1: Are You Prepared?

July 1 marked the official enforcement date of the Tennessee Information Protection Act (TIPA), the state’s comprehensive consumer privacy law. Signed into law in 2023, TIPA grants consumers specific rights concerning their...more

DLA Piper

Uganda: Data Protection Regulator Clarifies Compliance Requirements for Offshore Entities

DLA Piper on

In a decision issued on 18 July 2025 against Google LLC, the Personal Data Protection Office (PDPO) has affirmed that the data protection compliance obligations under Ugandan law apply to all entities that handle the personal...more

BCLP

EMEA - Data Privacy, Digital and AI Round Up - July 2025

BCLP on

As we pass the mid-point of 2025, it’s a good time to review the important developments we have seen in the first 6 months of this year, particularly reforms to the UK’s data protection laws, the EU’s pathway to...more

Fisher Phillips

New California Regs Will Impact Your AI and Privacy Policies: FAQs on Automated Decision-Making, Risk Assessments, and...

Fisher Phillips on

California regulators unanimously approved a sweeping set of regulations on July 24 governing the use of automated decision-making technology (ADMT) and mandating risk assessments and cybersecurity audits for businesses...more

WilmerHale

AI and GDPR: A Road Map to Compliance by Design - Episode 5: Using AI

WilmerHale on

The rise of artificial intelligence (AI) and its widespread availability offers significant growth opportunities for businesses. However, it necessitates a robust governance framework to ensure compliance with regulatory...more

Fisher Phillips

Workday Ruling: How Europe’s Top Courts Raised the Bar for Employee Data Protection

Fisher Phillips on

Cloud-based HR systems have become standard for multinational businesses, driving efficiency but also increasing compliance and privacy risks. Indeed, a recent Workday case, which originated in Germany, has clarified the...more

Fisher Phillips

Proposed New Jersey Regulations Would Require Major Privacy Compliance Shifts for Businesses

Fisher Phillips on

New Jersey officials recently released proposed privacy regulations that would create several new compliance obligations for businesses above and beyond what existing state law and many other state laws require, meaning you...more

Goodwin

The Data Shift: UK Sets a New Course With 2025 Data (Use and Access) Act

Goodwin on

The Data (Use and Access) Bill passed both Houses of UK Parliament and received Royal Assent on 19 June 2025, now becoming the Data (Use and Access) Act 2025 (“DUA Act”). This is the final iteration of the Data Protection and...more

296 Results
 / 
View per page
Page: of 12

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide